Information disclosure

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...

CVE-2017-0085

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0091, CVE-2017-0092, CVE-2017-0111,...

CVE-2017-0124

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...

CVE-2017-0118

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a...

CVE-2017-0125

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...

CVE-2017-0089

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0072,...

CVE-2017-0117

CVE-2017-0117 concerns a vulnerability in Windows Uniscribe (usp10.dll) that can disclose memory contents when rendering Unicode text via a crafted web site. Connected sources indicate exploitation in the wild (e.g., exploit-db entry 41655) and show that the issue manifests through user32/glyph r...

Microsoft Windows Uniscribe Information Disclosure Vulnerability (CNVD-2017-03354)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Uniscribe also known as Unicode Script Processor is one of the components that enables the Windows operating system to correctly present Unicode text. An information disclosure vulnerability exists in...

CVE-2017-0122

Technical details for CVE-2017-0122 are not provided in the initial or connected documents; only references to MSRC advisories and related Uniscribe CVEs are present. Monitor for updates.

CVE-2017-0123

CVE-2017-0123 concerns Uniscribe (usp10.dll) in affected Windows editions (Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1). The vulnerability allows a remote attacker to obtain sensitive information from a process address space via a crafted web site, i.e., an informatio...

Microsoft Windows Uniscribe Information Disclosure Vulnerability (CNVD-2017-03356)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Uniscribe also known as Unicode Script Processor is one of the components that enables the Windows operating system to correctly present Unicode text. An information disclosure vulnerability exists in...

CVE-2017-0112

The vulnerability CVE-2017-0112 affects Uniscribe in Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. It enables remote information disclosure by a crafted web site that causes Uniscribe to read process memory, exposing sensitive data. Exploitation is possible without user pr...

CVE-2017-0115

CVE-2017-0115 is an Uniscribe information-disclosure vulnerability affecting Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. The issue allows a remote attacker to read sensitive data from a process’s memory when a user visits a crafted web site, via the Uniscribe/usp10 path ...

CVE-2017-0113

CVE-2017-0113 concerns Uniscribe in Windows Vista SP2, Server 2008 SP2/R2 SP1, and Windows 7 SP1. The connected documents confirm it as an information-disclosure vulnerability in the Uniscribe component accessed via APIs like DrawText, enabling an attacker-controlled web resource to potentially r...

Microsoft Windows Uniscribe Information Disclosure Vulnerability (CNVD-2017-03348)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Uniscribe also known as Unicode Script Processor is one of the components that enables the Windows operating system to correctly present Unicode text. An information disclosure vulnerability exists in...

CVE-2017-0091

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0092, CVE-2017-0111,...

CVE-2017-0122

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...

Microsoft Windows Uniscribe Information Disclosure Vulnerability (CNVD-2017-03361)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Uniscribe also known as Unicode Script Processor is one of the components that enables the Windows operating system to correctly present Unicode text. An information disclosure vulnerability exists in...

CVE-2017-0128

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...

Microsoft Windows Uniscribe Information Disclosure Vulnerability (CNVD-2017-03358)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Uniscribe also known as Unicode Script Processor is one of the components that enables the Windows operating system to correctly present Unicode text. An information disclosure vulnerability exists in...